The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0069 advisory.

    This advisory aggregates security fixes for the sqlite SRPM in CIQ LTS 8.6. It addresses 32 CVEs:
    CVE-2020-15358, CVE-2019-19880, CVE-2020-13435, CVE-2019-13734, CVE-2019-5827, and 27 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2022_7108 advisory.

    * sqlite: Out of bounds access during table rename (CVE-2020-35527)

    * sqlite: Null pointer derreference in src/select.c (CVE-2020-35525)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a     nested FROM clause. (CVE-2020-35527)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0179 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2020-35525:
    In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing.

    CVE-2020-13435:
    SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.

    CVE-2020-15358:
    In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy     heap overflow because of misuse of transitive properties for constant propagation.

    CVE-2020-35527:
    In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a     nested FROM clause.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3107 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3107-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                           Chris Lamb     September 13, 2022                            https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : sqlite3     Version        : 3.27.2-3+deb10u2     CVE IDs        : CVE-2020-35525 CVE-2020-35527 CVE-2021-20223

    It was discovered that there were three issues in SQLite:

    * CVE-2020-35525: Prevent a potential null pointer deference issue in       INTERSEC query processing.

    * CVE-2020-35527: Prevent an out-of-bounds access issue that could be       exploited via ALTER TABLE in views that have a nested FROM clauses.

    * CVE-2021-20223: Prevent an issue with the unicode61 tokenizer       related to Unicode control characters (class Cc) and embedded NUL       characters being misinterpreted as tokens.


    For Debian 10 buster, these problems have been fixed in version     3.27.2-3+deb10u2.

    We recommend that you upgrade your sqlite3 packages.

    For the detailed security status of sqlite3 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/sqlite3

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
358285	Rocky Linux 8.6 [CIQ] Security Update: lemon / lemon-debuginfo / sqlite / sqlite-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0069)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	high
359331	Rocky Linux 8 [CIQ] Security Update: lemon / lemon-debuginfo / sqlite / sqlite-debuginfo / etc Multiple Vulnerabilities (crlsa-2022_7108)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	critical
243838	Linux Distros Unpatched Vulnerability : CVE-2020-35527	Nessus	Misc.	2025/8/5	2026/7/19	critical
236450	Alibaba Cloud Linux 3 : 0179: sqlite (ALINUX3-SA-2022:0179)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	critical
164992	Debian dla-3107 : lemon - security update	Nessus	Debian Local Security Checks	2022/9/13	2025/9/24	critical

偵測

搜尋 Plugin

high

critical

critical

critical

critical